Our takeCISA reports active exploitation of a privilege-escalation flaw (CVE-2026-92817, CVSS 8) in Inductive Automation Ignition <=8.1.54 and <=8.3.8. Update if it sits in your OT stack.Cyber Resilience desk
Sources (2)
- cisa_advisories · cisa_advisories
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA advisory ICSA-26-286-01 reports active exploitation of CVE-2026-92817 (CVSS 8) in Inductive Automation Ignition <=8.1.54 and <=8.3.8. Authenticated low-privilege users can escalate to higher privileges. Update to a fixed release if you run Ignition in your OT or industrial environment.
What this means for you — Lean IT orgs:CISA reports active exploitation of a privilege-escalation flaw in Inductive Automation Ignition versions 8.1.0–8.1.54 and 8.3.0–8.3.8. Update right away if you run this software yourself; most teams on newer versions or hosted alternatives can ignore it.
What this means for you — MSP:CISA reports active exploitation of CVE-2026-92817 (CVSS 8) allowing authenticated low-privilege users to escalate in Inductive Automation Ignition <=8.1.54 and <=8.3.8. Check client OT/industrial environments and patch affected instances promptly.
What this means for you — Researcher:CISA advisory ICSA-26-286-01 flags active exploitation of CVE-2026-92817 (CVSS 8) in Inductive Automation Ignition >=8.1.0 <=8.1.54 and >=8.3.0 <=8.3.8. Authenticated low-privilege users can escalate privileges.